def ad.ae.eout
import bend-osdev-aead@0.1.0.0/aegis128.bend as Aegis128import Base
import bend-osdev-bytes@0.1.0.0/bytes.bend as B
import bend-osdev-aead@0.1.0.0/aesround.bend as R
142def ad.ae.eout(xs: List<&2, U32>, +sb: R.AdSbox, +r: AdAegisRun) -> List<&2, U32>:
143 match xs:
144 case Nil{}:
145 Nil{}
146 case Con{+x, t}:
147 Con{B.byte(U32.xor(x, ad.ae.zhead(r))), ad.ae.eout(t, sb, ad.ae.step(sb, r, B.byte(x)))}